Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64b6ef01-30e6-30b2-ab19-9c08953cc62b.roa
File: 64b6ef01-30e6-30b2-ab19-9c08953cc62b.roa (raw, json)
Hash identifier: /XW9q7sVlop71Ygvw7kz9PdZj/6DYaozBNtVK+d+lDQ=
Subject key identifier: 9A:0A:DA:79:60:27:54:91:C9:EC:17:B6:6B:92:2D:25:A1:94:47:FB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584835BA9C6BAA879FCCCEEB7800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64b6ef01-30e6-30b2-ab19-9c08953cc62b.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 184.85.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:9c:6b:aa:87:9f:cc:ce:eb:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=2e9d4691-6077-4286-8d85-52f98f4d834c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:24:5c:44:e2:7d:68:45:bf:ad:ca:98:35:
e4:96:10:5b:d9:9c:ec:ce:8b:e8:d6:ec:2c:2a:0f:
6c:19:aa:8a:48:8e:b8:e6:b0:9a:9a:9a:b8:4b:98:
91:a5:73:df:27:96:41:ea:93:8b:27:ab:23:7f:7d:
4b:25:d6:3b:62:3c:a9:09:bd:ee:b2:dc:00:b2:95:
2a:2e:5b:4c:2f:e1:ae:37:72:54:ae:33:ea:34:26:
d4:96:e2:7c:87:65:36:d4:a7:dc:b5:65:1c:f2:ed:
79:6c:1f:a9:e4:38:fc:9a:ff:7b:74:0b:a3:ac:db:
fa:0b:22:c0:d8:56:67:28:60:fb:70:a5:ff:ca:61:
cf:17:8f:4a:21:1d:56:2e:29:94:4c:6a:6a:78:a2:
07:cb:4d:f6:e3:f4:d0:da:bf:51:9d:a7:a2:2b:61:
11:88:54:d5:cf:06:fc:b8:67:cb:db:22:fb:49:9d:
ba:3a:d6:cd:30:e5:ba:2b:4d:6e:8e:12:35:dc:e3:
8a:aa:c8:49:88:5b:49:ed:74:31:3d:1a:c9:6d:df:
dd:72:c0:d9:56:a7:16:fe:56:e9:c5:ad:ea:db:27:
e4:2b:97:63:8d:3f:da:07:ca:35:0f:a1:89:c1:d8:
03:4b:49:e5:c9:06:08:31:e1:eb:47:fa:df:e5:bc:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0A:DA:79:60:27:54:91:C9:EC:17:B6:6B:92:2D:25:A1:94:47:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64b6ef01-30e6-30b2-ab19-9c08953cc62b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.85.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c9:7f:cf:58:84:36:9b:c3:e6:c5:7c:c3:9d:16:b1:3d:3f:
73:e9:ef:48:c6:71:71:43:f6:30:e1:54:60:7b:7a:68:37:a9:
1a:99:ea:66:41:61:76:63:ec:ab:9d:57:59:72:7d:62:79:cd:
7f:0d:ae:78:2d:67:09:ec:17:15:fd:c5:7a:ac:b7:5f:83:0a:
d0:d2:55:80:06:36:38:39:c3:a2:08:f2:72:ce:34:d6:8b:f2:
e1:b7:36:28:86:d2:d6:c1:c6:f3:13:09:f9:79:6d:be:2b:be:
b8:af:93:ed:a6:ba:11:ac:97:60:bb:ae:1b:ce:48:3c:8d:25:
2d:cd:9f:9c:ff:29:90:bf:22:0a:b1:67:44:33:69:7b:2c:7d:
0d:43:4d:cf:c4:52:13:10:4d:1d:ef:70:7c:fa:d0:d4:40:18:
1f:cd:83:49:d8:e1:3f:fe:e3:62:1a:53:3d:f9:b0:57:89:e0:
65:df:44:2c:74:97:95:dd:fc:0e:d8:36:cc:30:ec:0e:bf:3c:
da:33:7b:7f:d0:4d:61:c5:d6:7e:bf:59:47:6a:b8:c0:b6:ea:
10:9f:87:0a:0f:02:bb:5e:30:d5:c2:fc:bc:88:e4:45:21:37:
cf:bb:cb:31:7d:59:7a:d2:09:29:8f:b2:e0:97:38:bf:71:4c:
2d:aa:9f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:10 2025 by rpki-client